--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-16T18:42:12Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-09-16T18:42:12Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-16T18:42:12Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-09-16T18:42:12Z" name: system:openshift:openshift-monitoring-4b2wx resourceVersion: "8300" uid: 74d5fedf-768f-423f-9f7e-2d2982c768fd spec: extra: authentication.kubernetes.io/credential-id: - JTI=d0becae7-b597-4be0-950f-918b476c3019 authentication.kubernetes.io/node-name: - ip-10-0-135-11.ec2.internal authentication.kubernetes.io/node-uid: - 027ff2d4-2aeb-4f54-9cd0-4e09be531eae authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-6cd954b897-lw64c authentication.kubernetes.io/pod-uid: - 481959d8-58d2-407a-b0e9-a0c8b4b16dc2 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: ed2021f9-2ea4-4977-9de5-d74701b70ee7 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN0akNDQVo2Z0F3SUJBZ0lSQUltV1lkTXZzWWdUOFlQVDRmSFYyQ2N3RFFZSktvWklodmNOQVFFTEJRQXcKTGpFU01CQUdBMVVFQ3hNSmIzQmxibk5vYVdaME1SZ3dGZ1lEVlFRREV3OXJkV0psTFdOemNpMXphV2R1WlhJdwpIaGNOTWpZd09URTJNVGd6TnpFeVdoY05Namd3T1RFMU1UZ3pOekV5V2pCRU1VSXdRQVlEVlFRREV6bHplWE4wClpXMDZjMlZ5ZG1salpXRmpZMjkxYm5RNmIzQmxibk5vYVdaMExXMXZibWwwYjNKcGJtYzZiV1YwY21samN5MXoKWlhKMlpYSXdXVEFUQmdjcWhrak9QUUlCQmdncWhrak9QUU1CQndOQ0FBU1lLbGk4VXd4YUhlOVd6SkdqTGFjOQo2R3ZvNUg3akQ0S2h2b2dZd2ZGYTVNdFYxcTNoSzZCNS9OdHpWa3VTaEtpSVpwRXVzWmpIaUQ4RytBSVZYYnFJCm80R0RNSUdBTUE0R0ExVWREd0VCL3dRRUF3SUZvREFUQmdOVkhTVUVEREFLQmdnckJnRUZCUWNEQWpBTUJnTlYKSFJNQkFmOEVBakFBTUVzR0ExVWRJd1JFTUVLQVFPV3hBTnVlUVNBeVBWUysyam5jU3QwbEIvOU51K0JPWHplZgpKZTVEeWJQaGN4UnkzWld5S2pORmRqTU0zSjI2SG1EeFloQVZCVVBsQjhOUXY4ZFFkT1V3RFFZSktvWklodmNOCkFRRUxCUUFEZ2dFQkFDT1FGaTJLeU40eWhzQ0c4RnFENXZmWm04bDFMSDRrQmJBWnR6bXRUR2RqNkNIc0pQN2YKR3FHR1ZxWHpBYzBiSmU0ZHRRQ2I2VEErZ3RYcWNGUXUwVVQrL3g4MzAwWGNEem1mRzdxUDhINnpQSHRQcUZLVAp1bjhZaHl1b3YrakN2ejZQRXFVMVFrd3hKRUFUOTIzc3dHYkFaWDhIOFBHdzJxUlM5OE05K1plR29iWDJ4eUJXCnF2SFJyWmpNalhiQWl2czZxRzgzc3d2cHh6SEtqaFJ1YkJKellYUmxPOUU0WnY1a0ova00wc0JRd3hXRGN3dzQKQkRzWHBEMDFJL0FtZE1uU0JYM3duMkFSRGZyQWxUQ3BqUGFVY3BlSGVrRjVZdUU1REpqYm5WK1dVVlY0TWFXeApqcExOQmpoWU5SUTdLRWU5ajBmTW5LK3Vmd3JIUzN3WHV4RT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= conditions: - lastTransitionTime: "2026-09-16T18:42:12Z" lastUpdateTime: "2026-09-16T18:42:12Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-4b2wx" reason: AutoApproved status: "True" type: Approved